IMO, I believe 1/2 - 3/4 of it is correct, the malware testing, just not the real world testing, apart from the browser testing of phishing, malware website links.
It does, they do give us a general idea of what to consider, as far as the tests and its results.
What I would consider more of a real time test of our AV is, "here are the links to the malware samples/malware sites, on your devices go there and see if the page is blocked, then if the download is blocked, or when we try to run it, it's blocked/flagged, in real time with all the modules enabled during that time. But, I know that isn't practical and we can't do that on our daily devices apart from using VMware.